Systems Security Specialist III

Department: Information Security / Risk and Compliance

Work Arrangement: Hybrid; onsite attendance as required

Schedule: Must be willing to work night and rotational shifts based on business needs

Travel: Must be capable of traveling as needed

Regional Scope: APAC and Africa regions.

Site: Vertis North

Position Summary

The Systems Security Specialist III supports and oversees information security, privacy, governance, risk, and compliance initiatives across global BPO operations. The role identifies security gaps, privacy threats, and process weaknesses; assesses their potential impact; and partners with Account Managers, Directors, and cross-functional teams to develop practical remediation plans.

The Specialist also supports audit readiness and evidence collection for PCI DSS 2025 and ISO 27001, conducts operational reviews for client environments, and helps ensure security and privacy controls are applied consistently across assigned regions and business operations.

Key Responsibilities

• Manage and support information security projects related to fraud, risk, data privacy, and operational security.
• Oversee security and compliance programs across APAC and Africa regions.
• Conduct global operational analyses, client assessments, and audits to identify control gaps, privacy threats, vulnerabilities, and process weaknesses.
• Document findings, assess risks, and present clear remediation recommendations to Account Managers, Directors, and relevant stakeholders.
• Work with cross-functional departments and business teams to develop, document, and monitor risk-treatment action plans.
• Recommend practical controls and process improvements to reduce security risks and potential organizational impact.
• Support Governance, Risk, and Compliance (GRC) activities, including risk assessments, control reviews, and compliance tracking.
• Assist with PCI DSS 2025 audit evidence collection and coordination.
• Support ISO 27001 internal audits, including documentation review, evidence gathering, and follow-up on corrective actions.
• Help business teams understand and apply security and privacy requirements within BPO operations and client processes.
• Maintain appropriate records of assessments, audit evidence, findings, remediation activities, and risk decisions.
• Participate in periodic team meetings, training sessions, and business-development activities to maintain relevant skills and knowledge.
• Perform other duties assigned by TELUS International or its entities that support data privacy, information security, and the rights of data subjects.

Qualifications and Experience

• Experience in information security, security compliance, risk management, privacy, or a related field.
• Experience supporting global security or compliance programs and working with geographically distributed teams.
• Knowledge of Governance, Risk, and Compliance practices and operational risk management.
• Experience with audit preparation, evidence collection, control testing, or internal audits.
• Familiarity with PCI DSS and ISO 27001 requirements.
• Understanding of how to apply security and compliance controls in BPO or client-service environments.
• Strong analytical, documentation, communication, and stakeholder-management skills.
• Ability to translate security findings into clear, actionable remediation plans.
• Ability to work collaboratively with operational teams, clients, and senior stakeholders.

Work Requirements

• Hybrid work arrangement, with onsite reporting as required.
• Availability for night and rotational shifts based on business needs.
• Willingness and ability to travel as required.